Description (CNA)
An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a remote unauthenticated attacker to send specially crafted requests in-order-to cause service disruptions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ivanti / Connect Secure | affected 9.1R18.5 before 9.1R18.5; affected 22.6R2.3 before 22.6R2.3; affected 9.1R17.4 before 9.1R17.4; affected 22.2R3 before 22.2R3; affected 22.5R2.4 before 22.5R2.4; affected 9.1R14.6 before 9.1R14.6; affected 9.1R16.4 before 9.1R16.4; affected 9.1R15.4 before 9.1R15.4; affected 22.2R4.2 before 22.2R4.2; affected 22.4R1.2 before 22.4R1.2; affected 22.6R1.2 before 22.6R1.2; affected 22.1R6.2 before 22.1R6.2; affected 22.3R1.2 before 22.3R1.2 |
| Ivanti / Connect Secure | affected 22.4R2.4 before 22.4R2.4; affected 22.5R1.3 before 22.5R1.3 |
| Ivanti / Policy Secure | affected 22.5R1.3 before 22.5R1.3; affected 9.1R18.5 before 9.1R18.5; affected 9.1R17.4 before 9.1R17.4; affected 22.2R3 before 22.2R3 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.